473,657 Members | 2,515 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Using WSE3 For Web Service Kerberos Auth

Ben
Hi,

i'm trying to implement WSE3 to secure a web service via Kerberos.

i used the example at: C:\Program Files\Microsoft WSE\v3.0\Sample s\CS
\QuickStart\Sec urity\WSSecurit yKerberos\Code
but i get this error:

"Security requirements are not satisfied because the security header
is not present in the incoming message."
on the web service side, I just enabled WSE and using this line to
obtain the username:

KerberosToken token =
RequestSoapCont ext.Current.Cre dentials.Ultima teReceiver.GetC lientToken<Kerb erosToken>();
on the client side I'm using this code to send auth:

KerberosToken token = new
KerberosToken(S ystem.Net.Dns.G etHostName());
KerberosAsserti on assertion = new KerberosAsserti on();
proxy.SetClient Credential(toke n);

// Set the policy onto the proxy
Policy policy = new Policy();
policy.Assertio ns.Add(assertio n);
proxy.SetPolicy (policy);

// trying to call test web service function
Response.Write( "user: " + proxy.GetLogged OnUser());
any ideas?!? are certificates necessary to set this up? i'd really
appreciate any help, i've been battling this issue for a week...
thanks so much!!!
Jun 27 '08 #1
1 2061
Ben
On May 2, 12:29*pm, Ben <benm5...@gmail .comwrote:
Hi,

i'm trying to implement WSE3 to secure a web service via Kerberos.

i used the example at: C:\Program Files\Microsoft WSE\v3.0\Sample s\CS
\QuickStart\Sec urity\WSSecurit yKerberos\Code

but i get this error:

"Security requirements are not satisfied because the security header
is not present in the incoming message."

on the web service side, I just enabled WSE and using this line to
obtain the username:

KerberosToken token =
RequestSoapCont ext.Current.Cre dentials.Ultima teReceiver.GetC lientToken<Kerb *erosToken>();

on the client side I'm using this code to send auth:

* * *KerberosToken token = new
KerberosToken(S ystem.Net.Dns.G etHostName());
* * *KerberosAssert ion assertion = new KerberosAsserti on();
* * *proxy.SetClien tCredential(tok en);

* * *// Set the policy onto the proxy
* * *Policy policy = new Policy();
* * *policy.Asserti ons.Add(asserti on);
* * *proxy.SetPolic y(policy);

* * *// trying to call test web service function
* * *Response.Write ("user: " + proxy.GetLogged OnUser());

any ideas?!? *are certificates necessary to set this up? *i'd really
appreciate any help, i've been battling this issue for a week...
thanks so much!!!
No one knows? please...if anyone has an idea help me understand how
to set this up.
Jun 27 '08 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
1702
by: Josh T | last post by:
Hi, I'm running Debian Sarge Linux, PHP 4, Apache 2, mod-auth-kerb, PostgreSQL 7.4 on the web server and Windows 2000 Active Directory as the Kerberos server. I want Windows PC users to be able to automatically logon to Apache and PostgreSQL with their Windows usernames/password without any prompts. I can get Apache and mod-auth-kerb to work. I can get the pgsql program to work with Kerberos. However, I need a PHP script already...
0
8169
by: Andreas Schmid | last post by:
Hi, I try to run the example from http://java.sun.com/products/jndi/tutorial/ldap/security/gssapi.html The login on Kerberos succeeds and i get this ticket: Principal: user@MY-DOMAIN.ORG Private Authentisierung: Ticket (hex) = 0000: 61 81 EF 30 81 EC A0 03 02 01 05 A1 0F 1B 0D 4D
1
3282
by: trapeze.jsg | last post by:
Hi. I am trying to get through to Microsoft MapPoint Services using ZSI for soap handling. I can generate the service classes and also the soap-requests generated by the service classes seem to be OK. The problem I am facing is that I can't seem to authenticate myself. I have made a small change to ZSI.client so that when I get a "401 Unauthorized" response from the remote server I build up a nice authorization request:
3
6915
by: Patrick Fogarty | last post by:
I am programming what is to be a web service client that will use an HTTP-POST to request and retrieve data. The remote server (written in java for what it's worth) requires basic authentication as per RFC 2617 (http://www.faqs.org/rfcs/rfc2617.html). My attempts to authenticate are failing. The server requires the header to be present with the request. For security reasons, it will not reply in any way if the header is not present. ...
3
6972
by: David | last post by:
Hi, I've had a quick look but cannot find a module that will let me authenticate against Kerberos. There appears to be a krb5 module that hasn't been updated for a long time and I can't find much on it except the pages at starship.python.net. I don't need to do anything except authenticate and gain the correct credentials.
3
2613
by: Jay-nospam | last post by:
Hi there, I am having trouble getting an ASP.NET web application to connect to another computer and passing the proper credentials and I hope someone can help me. I have a stand-alone Windows 2003 Server, ServerA, running as a Web Server that uses ASP.NET. The default.aspx file tries to access a file in a share on another computer, ServerB. ServerA and ServerB are on the same domain and are both running Windows 2003 Server.
0
5055
by: Albertas | last post by:
Hello, I have a question. But first my situation: I had a Web Service, which was written using .NET Framework 2.0, here is my code: public class Service : System.Web.Services.WebService { public class Authentication : SoapHeader
0
2038
by: choukse | last post by:
Hi All, I am trying to bind to ADAM instance with a windows user through JNDI and it keeps failing. My ADAM and AD is running on same Windows 2k3 server. But, through LDP I am able to bind with the same windows user successfully and browse through the entire tree successfully. The error is as below
10
1952
by: Ben | last post by:
I'm trying to access a c# web service from a web form. I set up the web reference proxy object as follows: proxy.PreAuthenticate = true; proxy.Credentials = CredentialCache.DefaultCredentials; but i get a 401 error. If I switch the IIS website from Integrated Windows Auth to Anonymous, it works... but i want it to use windows
0
8413
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8324
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
1
8513
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
1
6176
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
5642
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4173
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4330
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
2742
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
1970
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.